CVE-2019-14731: XSS
Published Aug 6, 2019
·Updated
An issue was discovered in ZenTao 11.5.1. There is an XSS (stored) vulnerability that leads to the capture of other people's cookies via the Rich Text Box.
Affected Software
1 affected component
Cnezsoft Zentao=11.5.1
Event History
Aug 6, 2019
CVE Published
via MITRE·11:36 PM
Data Sourced
via MITRE·11:36 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-14731?
CVE-2019-14731 is considered a high severity vulnerability due to its potential impact on user data security.
2
How do I fix CVE-2019-14731?
To fix CVE-2019-14731, upgrade ZenTao to version 11.5.2 or later, where the vulnerability is resolved.
3
What type of vulnerability is CVE-2019-14731?
CVE-2019-14731 is a stored cross-site scripting (XSS) vulnerability affecting ZenTao 11.5.1.
4
What are the potential consequences of CVE-2019-14731?
If exploited, CVE-2019-14731 could allow attackers to capture cookies of other users, leading to session hijacking.
5
Which software versions are affected by CVE-2019-14731?
CVE-2019-14731 specifically affects ZenTao version 11.5.1.